A dashboard user who can import backups and add MCP stdio servers can execute arbitrary Python code as the AstrBot process user on the host. The reachable impact includes disclosure of application ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results